CN107908525B - Alarm processing method, equipment and readable storage medium - Google Patents
Alarm processing method, equipment and readable storage medium Download PDFInfo
- Publication number
- CN107908525B CN107908525B CN201710962562.8A CN201710962562A CN107908525B CN 107908525 B CN107908525 B CN 107908525B CN 201710962562 A CN201710962562 A CN 201710962562A CN 107908525 B CN107908525 B CN 107908525B
- Authority
- CN
- China
- Prior art keywords
- alarm
- processing
- scheme
- case
- execution point
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/324—Display of status information
- G06F11/327—Alarm or error message display
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/321—Display for diagnostics, e.g. diagnostic result display, self-test user interface
Abstract
The invention discloses an alarm processing method, which comprises the following steps: acquiring alarm content in an alarm library; searching an alarm case matched with the alarm content in an alarm case library, wherein the alarm case comprises an alarm template, an information collection scheme and an alarm processing scheme; extracting alarm parameters from the alarm content based on the alarm template; executing the information collection scheme to obtain alarm related information so that operation and maintenance personnel can manually check the alarm processing scheme based on the alarm related information; and when the manual review passes, transmitting the alarm parameters into an alarm processing scheme and executing. The invention also discloses an alarm processing device and a computer readable storage medium. The invention realizes the automatic processing of the alarm flow, reduces the workload of operation and maintenance personnel, avoids the errors of manual operation and improves the operation and maintenance efficiency.
Description
Technical Field
The invention relates to the technical field of IT operation and maintenance, in particular to an alarm processing method, alarm processing equipment and a readable storage medium.
Background
The traditional alarm processing flow needs manual intervention of operation and maintenance personnel, for example, after the operation and maintenance personnel receive the alarm information, the operation and maintenance personnel generally search manually to search a corresponding alarm processing scheme. After the alarm processing scheme is determined, the operation and maintenance personnel also need to input related instructions on the computer, so that the alarm processing is finally completed. If the alarm is more and frequent, the working pressure of the operation and maintenance personnel is greatly increased, meanwhile, the manual treatment is easy to cause misoperation, and the operation and maintenance efficiency is greatly reduced.
Disclosure of Invention
The invention mainly aims to provide an alarm processing method, alarm processing equipment and a readable storage medium, and aims to solve the technical problem of how to realize automatic alarm processing.
In order to achieve the above object, the present invention provides an alarm processing method, which comprises the following steps:
acquiring alarm content in an alarm library;
searching an alarm case matched with the alarm content in an alarm case library, wherein the alarm case comprises an alarm template, an information collection scheme and an alarm processing scheme;
extracting alarm parameters from the alarm content based on the alarm template;
executing the information collection scheme to obtain alarm related information so that operation and maintenance personnel can manually check the alarm processing scheme based on the alarm related information;
and when the manual review passes, transmitting the alarm parameters into the alarm processing scheme and executing.
Optionally, before obtaining the alarm content in the alarm library, the alarm processing method further includes:
and acquiring and analyzing alarm information from an external alarm source to obtain alarm content, and storing the alarm content in an alarm library.
Optionally, the searching for the alarm case matched with the alarm content in the alarm case library includes:
searching an alarm case library by a search engine by taking the alarm content as a search condition to obtain a first candidate alarm case set meeting a first preset matching degree condition;
screening out a second candidate alarm case set which meets a second preset matching degree condition from the first candidate alarm case set;
extracting a plurality of preset keywords from each candidate alarm case of the second candidate alarm case set in sequence, and matching the keywords with the alarm content to obtain a matching result;
and taking the candidate alarm case with the highest matching degree and all matched keywords in the matching result as the finally selected alarm case.
Optionally, the information collection scheme includes a plurality of processing steps, and each processing step corresponds to one check execution point configuration; the executing the information collection scheme to obtain the alarm related information includes:
and calling a corresponding preset check execution point to execute information collection processing based on the check execution point configuration in the information collection scheme to obtain alarm related information, and storing the information collection processing execution condition into an alarm library, wherein the check execution point is an automatic execution script.
Optionally, the alert processing method further includes:
after the information collection is completed, sending a message to a preset terminal for informing operation and maintenance personnel to carry out manual examination and verification;
and when the viewing request of the alarm related information is detected, displaying the alarm related information in an auditing page so that operation and maintenance personnel can manually audit the alarm processing scheme based on the alarm related information.
Optionally, the alarm processing scheme includes multiple processing steps, and each processing step corresponds to a processing execution point configuration; the passing the alarm parameters into the alarm handling scheme and performing comprises:
based on the configuration of the processing execution point in the alarm processing scheme, calling a corresponding preset processing execution point and transmitting the alarm parameter into the processing execution point;
and executing the processing execution point to process the alarm and storing the alarm processing execution condition into an alarm library, wherein the processing execution point is an automatic execution script.
Optionally, the alert processing method further includes:
and when an alarm processing condition viewing request is received, acquiring the corresponding information collection processing execution condition and/or the alarm processing execution condition from the alarm library and returning.
Optionally, the alarm processing method further includes one or more of the following operations:
displaying an alarm case maintenance page, and submitting page information to an alarm case library for adding and/or modifying an alarm case;
and displaying an execution point maintenance page, and submitting page information to an alarm case library for adding and/or modifying an execution point, wherein the execution point is an inspection execution point or a processing execution point.
Further, to achieve the above object, the present invention also provides an alarm processing device, including: a memory, a processor and an alarm handling program stored on the memory and executable on the processor, the alarm handling program when executed by the processor implementing the steps of the alarm handling method as claimed in any one of the above.
Further, to achieve the above object, the present invention also provides a computer readable storage medium having an alarm processing program stored thereon, which when executed by a processor implements the steps of the alarm processing method according to any one of the above.
The invention adopts a software processing mode to finish each process of alarm processing, comprising the following steps: acquiring alarm content from an alarm library; then, taking the alarm content as a retrieval condition, retrieving a matched alarm case from an alarm case library, wherein an alarm template, an information collection scheme and an alarm processing scheme are arranged in the alarm case; alarm parameters in the alarm content can be extracted based on the alarm template, and alarm related information can be obtained by executing an information collection scheme, so that operation and maintenance personnel can be provided for manually checking the alarm processing scheme; if the audit is passed, the extracted alarm parameters are transmitted into an alarm processing scheme and executed, so that the automatic processing of the alarm process is realized, the workload of operation and maintenance personnel is reduced, meanwhile, the error of manual operation is avoided, and the operation and maintenance efficiency is improved.
Drawings
FIG. 1 is a schematic structural diagram of a hardware operating environment of a device according to an embodiment of the present invention;
FIG. 2 is a flow chart illustrating an embodiment of an alarm processing method according to the present invention;
fig. 3 is a schematic flowchart of a detailed process of step S20 in fig. 2.
The implementation, functional features and advantages of the objects of the present invention will be further explained with reference to the accompanying drawings.
Detailed Description
It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
As shown in fig. 1, fig. 1 is a schematic structural diagram of a hardware operating environment of a device according to an embodiment of the present invention.
The alarm processing equipment of the embodiment of the invention can be a PC (personal computer), a server, a tablet computer, a portable computer and the like.
As shown in fig. 1, the alarm processing device may include: a processor 1001, such as a CPU, a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. Wherein a communication bus 1002 is used to enable connective communication between these components. The user interface 1003 may include a Display screen (Display), an input unit such as a Keyboard (Keyboard), and the optional user interface 1003 may also include a standard wired interface, a wireless interface. The network interface 1004 may optionally include a standard wired interface, a wireless interface (e.g., WI-FI interface). The memory 1005 may be a high-speed RAM memory or a non-volatile memory (e.g., a magnetic disk memory). The memory 1005 may alternatively be a memory device separate from the processor 1001 described above.
Those skilled in the art will appreciate that the hardware configuration of the alarm processing device shown in FIG. 1 does not constitute a limitation of the alarm processing device, and may include more or fewer components than those shown, or some components may be combined, or a different arrangement of components.
As shown in fig. 1, a memory 1005, which is a kind of computer-readable storage medium, may include therein an operating system, a network communication module, a user interface module, and a computer program, such as an alarm processing program, and the like. The operating system is a program for managing and controlling alarm processing equipment and software resources and supports the operation of a network communication module, a user interface module, an alarm processing program and other programs or software; the network communication module is used for managing and controlling the network interface 1002; the user interface module is used to manage and control the user interface 1003.
In the hardware structure of the alarm processing device shown in fig. 1, the network interface 1004 is mainly used for connecting to a system background and performing data communication with the system background; the user interface 1003 is mainly used for connecting a client (user side) and performing data communication with the client; the alarm processing device calls, by the processor 1001, an alarm processing program stored in the memory 1005 to perform the following operations:
acquiring alarm content in an alarm library;
searching an alarm case matched with the alarm content in an alarm case library, wherein the alarm case comprises an alarm template, an information collection scheme and an alarm processing scheme;
extracting alarm parameters from the alarm content based on the alarm template;
executing the information collection scheme to obtain alarm related information so that operation and maintenance personnel can manually check the alarm processing scheme based on the alarm related information;
and when the manual review passes, transmitting the alarm parameters into the alarm processing scheme and executing.
Further, the alarm processing device calls an alarm processing program stored in the memory 1005 by the processor 1001 to perform the following operations:
and acquiring and analyzing alarm information from an external alarm source to obtain alarm content, and storing the alarm content in an alarm library.
Further, the alarm processing device calls an alarm processing program stored in the memory 1005 by the processor 1001 to perform the following operations:
searching an alarm case library by a search engine by taking the alarm content as a search condition to obtain a first candidate alarm case set meeting a first preset matching degree condition;
screening out a second candidate alarm case set which meets a second preset matching degree condition from the first candidate alarm case set;
extracting a plurality of preset keywords from each candidate alarm case of the second candidate alarm case set in sequence, and matching the keywords with the alarm content to obtain a matching result;
and taking the candidate alarm case with the highest matching degree and all matched keywords in the matching result as the finally selected alarm case.
Further, the alarm processing device calls an alarm processing program stored in the memory 1005 by the processor 1001 to perform the following operations:
and calling a corresponding preset check execution point to execute information collection processing based on the check execution point configuration in the information collection scheme to obtain alarm related information, and storing the information collection processing execution condition into an alarm library, wherein the check execution point is an automatic execution script.
Further, the alarm processing device calls an alarm processing program stored in the memory 1005 by the processor 1001 to perform the following operations:
after the information collection is completed, sending a message to a preset terminal for informing operation and maintenance personnel to carry out manual examination and verification;
and when the viewing request of the alarm related information is detected, displaying the alarm related information in an auditing page so that operation and maintenance personnel can manually audit the alarm processing scheme based on the alarm related information.
Further, the alarm processing device calls an alarm processing program stored in the memory 1005 by the processor 1001 to perform the following operations:
based on the configuration of the processing execution point in the alarm processing scheme, calling a corresponding preset processing execution point and transmitting the alarm parameter into the processing execution point;
and executing the processing execution point to process the alarm and storing the alarm processing execution condition into an alarm library, wherein the processing execution point is an automatic execution script.
Further, the alarm processing device calls an alarm processing program stored in the memory 1005 by the processor 1001 to perform the following operations:
and when an alarm processing condition viewing request is received, acquiring the corresponding information collection processing execution condition and/or the alarm processing execution condition from the alarm library and returning.
Further, the alarm processing device calls an alarm processing program stored in the memory 1005 by the processor 1001 to perform the following operations:
displaying an alarm case maintenance page, and submitting page information to an alarm case library for adding and/or modifying an alarm case;
and displaying an execution point maintenance page, and submitting page information to an alarm case library for adding and/or modifying an execution point, wherein the execution point is an inspection execution point or a processing execution point.
Based on the hardware structure of the alarm processing equipment, the invention provides various embodiments of the alarm processing method.
Referring to fig. 2, fig. 2 is a flowchart illustrating an alarm processing method according to an embodiment of the present invention. In this embodiment, the alarm processing method includes the following steps:
step S10, obtaining the alarm content in the alarm library;
step S20, searching an alarm case matched with the alarm content in an alarm case library, wherein the alarm case comprises an alarm template, an information collection scheme and an alarm processing scheme;
in this embodiment, the alarm processing device is provided with an alarm library and an alarm case library, the alarm library is mainly used for storing a database of alarm related information, including information such as alarm content, alarm date, alarm processing state, information collection result, and alarm processing result, and the alarm case library is mainly used for storing alarm cases.
In this embodiment, the alarm content is from an external alarm source, such as various software systems, and the alarm case is an alarm solution formed by a developer based on known alarm content, and mainly includes an alarm template, an information collection scheme, and an alarm processing scheme. It should be noted that the present invention does not limit the specific forms of the alarm content and the alarm case, and the setting is specifically performed according to the actual needs.
Optionally, before obtaining the alarm content in the alarm library, the alarm processing device obtains and analyzes alarm information from an external alarm source to obtain the alarm content, and stores the alarm content in the alarm library. The external warning source specifically adopts the JSON format to return the warning content, so after the warning information in the JSON format is obtained, the warning information needs to be firstly analyzed to obtain the warning content, and then the warning content is stored in the warning library, so that the caching and asynchronous processing of the warning content can be realized, and the warning processing efficiency is improved.
The present embodiment is not limited to the matching manner between the alarm content and the alarm case. For example, retrieving, by a search engine, alarm cases that match the alarm content; or setting a keyword for each alarm case in the alarm case library, where the keyword corresponds to specific alarm content, for example, if alarm information reported by an external alarm source carries an alarm type ID (configured as a keyword for an alarm case), the keyword can be accurately matched to the corresponding alarm case through the alarm type ID.
Optionally, the retrieval matching between the alarm content and the alarm case is realized through an alarm template. For example, the alert template is set to: xx system IP: the process of { $ ip } occurrence closes the alarm, and the alarm content is: xx system IP: 1.1.1.1 when the process closes the alarm, the alarm template is matched with the alarm content, and the alarm case where the alarm template is located can be determined to be the best matching case.
Step S30, extracting alarm parameters from the alarm content based on the alarm template;
in this embodiment, the alarm template is configured based on the alarm content, and further, the difference points in the same type of alarm content are abstracted into general parameters, that is, alarm parameters. For example, the alert template is set to: xx system IP: the process of { $ ip } occurrence closes the alarm, and the alarm content is: xx system IP: 1.1.1.1, if a process shutdown alarm occurs, the difference between the two alarms can be determined as 1.1.1.1, i.e. the alarm parameter in the alarm content, through comparison and analysis.
Step S40, executing an information collection scheme to obtain alarm related information for operation and maintenance personnel to manually check the alarm processing scheme based on the alarm related information;
in this embodiment, in view of the limitation of the current intelligent level, in order to avoid a more serious result caused by a possible alarm processing failure due to the direct execution of the alarm processing scheme in the alarm case, before the alarm is formally processed, the operation and maintenance personnel checks the alarm processing scheme, specifically, based on the alarm related information, decide whether the alarm processing scheme can be directly executed according to the alarm processing scheme in the matched alarm case, and if the operation and maintenance personnel checks that the alarm processing scheme can be executed, submit the checking suggestion, that is, the manual checking is passed.
In this embodiment, the information collection scheme is specifically configured to collect alarm related information, for example, the alarm content is xx system IP: 1.1.1.1, when a process shutdown alarm occurs, the matched information collection scheme in the alarm case at least includes contents of checking disk capacity and memory state, checking whether the process is really shut down, and the like, and the alarm related information collected after the scheme is executed at least includes information of disk capacity, memory state, process running state, and the like.
Optionally, after the information collection is completed, the alarm processing device sends a message to a preset terminal for notifying operation and maintenance personnel to perform manual review; for example, a notification message, such as an email, a WeChat, a short message, etc., is sent to a terminal, such as a mobile phone, a computer, etc., of the operation and maintenance staff. After receiving the audit notice, the operation and maintenance personnel logs in the alarm processing equipment to check the collected alarm related information, and when the alarm processing equipment detects a check request of the alarm related information, the alarm related information is displayed in an audit page so that the operation and maintenance personnel can manually audit the alarm processing scheme based on the alarm related information.
And step S50, when the manual review is passed, the alarm parameters are transmitted to the alarm processing scheme and executed.
When the operation and maintenance personnel agree to adopt the alarm processing scheme in the matched alarm case to process the alarm, for example, the operation and maintenance personnel click an audit pass button on an audit page, the alarm processing equipment transmits the alarm parameters in the alarm content into the alarm processing scheme and executes the alarm, thereby realizing the automatic processing of the alarm.
In this embodiment, each process of completing the alarm processing by using a software processing mode includes: acquiring alarm content from an alarm library; then, taking the alarm content as a retrieval condition, retrieving a matched alarm case from an alarm case library, wherein an alarm template, an information collection scheme and an alarm processing scheme are arranged in the alarm case; alarm parameters in the alarm content can be extracted based on the alarm template, and alarm related information can be obtained by executing an information collection scheme, so that operation and maintenance personnel can be provided for manually checking the alarm processing scheme; if the audit is passed, the extracted alarm parameters are transmitted into an alarm processing scheme and executed, so that the automatic processing of the alarm process is realized, the workload of operation and maintenance personnel is reduced, meanwhile, the error of manual operation is avoided, and the operation and maintenance efficiency is improved.
Referring to fig. 3, fig. 3 is a schematic view of a detailed flow of the step S20 in fig. 2. Based on the foregoing embodiment, in this embodiment, the foregoing step S20 further includes:
step S201, using the alarm content as a search condition, searching an alarm case library through a search engine to obtain a first candidate alarm case set meeting a first preset matching degree condition;
in the embodiment, the alarm case matched with the alarm content is searched from the alarm case library by adopting a search engine. For example, an ES (elastic search) search engine.
After receiving the alarm, the alarm processing equipment calls a search engine to search the alarm case. The ES scores the matching degree of the alarm content and the alarm cases, sorts the alarm contents from large to small, further obtains a plurality of sorted first candidate alarm case sets, and returns the first candidate alarm case sets to the alarm processing equipment in a list form, wherein the alarm case with the highest score has the highest matching degree with the alarm content.
Since the machine matching inevitably has the problem of error rate, in this embodiment, the alarm processing device will continue to perform secondary matching to increase the accuracy of matching the alarm case with the alarm content.
Step S202, screening out a second candidate alarm case set which meets a second preset matching degree condition from the first candidate alarm case set;
generally, a search engine performs matching sorting on all cases in an alarm case library, obviously, a large number of alarm cases which do not correspond to alarm content exist in a first candidate alarm case set, and the alarm cases obviously cannot be used for alarm processing. Therefore, the alarm processing equipment screens the alarm cases with too low scores before performing secondary matching.
For example, a score threshold is set, and the alarm cases in the first candidate alarm case set larger than the score threshold are used as candidate alarm case sets for secondary matching, that is, the second candidate alarm case set.
Step S203, a plurality of preset keywords are sequentially extracted from each candidate alarm case of the second candidate alarm case set and matched with the alarm content to obtain a matching result;
and step S204, taking the candidate alarm case with the highest matching degree and all matched keywords in the matching result as the finally selected alarm case.
The present embodiment specifically reduces the machine matching error rate by using the necessary keywords, for example, the operation and maintenance personnel specify several very special character strings in the alarm case as the necessary keywords in advance, that is, some keywords must appear in the alarm content to hit the matched alarm case, thereby ensuring the accuracy of matching the alarm case and avoiding using the wrong case to process the alarm.
Further optionally, in an embodiment of the alarm processing method of the present invention, in the above embodiment, step S40: executing the information collection scheme, and specifically obtaining the alarm related information comprises:
based on the configuration of the check execution point in the information collection scheme, calling the corresponding preset check execution point to execute information collection processing, obtaining alarm related information, and storing the execution condition of the information collection processing in an alarm library.
In this embodiment, the information collection scheme includes a plurality of processing steps, and each processing step corresponds to a configuration of an inspection execution point, where the inspection execution point is an automated execution script, which is an executable program. The same automation execution script may be reused by multiple alarm cases.
In this embodiment, when the alarm processing device executes the information collection scheme, the corresponding preset inspection execution point is called to execute information collection processing based on the configuration of the inspection execution point in the scheme, so as to obtain alarm related information, and the information collection processing execution condition is stored in the alarm library, so that operation and maintenance personnel can check the alarm processing condition at any time.
The present embodiment is not limited to setting the check execution point, and the setting is specifically performed according to actual needs.
Optionally, when receiving the alarm processing condition viewing request, the alarm processing device obtains the corresponding information collection processing execution condition from the alarm library and returns the information collection processing execution condition for displaying in the page. The operation and maintenance personnel can check the alarm processing condition and can also carry out operations such as scheme editing, pass/reject auditing and the like according to needs.
Further optionally, in another embodiment of the alarm processing method of the present invention, in the above embodiment, step S50: the transmitting and executing of the alarm parameters into the alarm processing scheme specifically includes:
based on the configuration of the processing execution point in the alarm processing scheme, calling the corresponding preset processing execution point and transmitting the alarm parameters into the processing execution point;
and executing the processing execution point to process the alarm, and storing the alarm processing execution condition into an alarm library.
In this embodiment, the alarm processing scheme includes a plurality of processing steps, and each processing step corresponds to a processing execution point configuration, where the processing execution point is an automated execution script, which is an executable program. The same automation execution script may be reused by multiple alarm cases.
In this embodiment, after the manual review is passed, the alarm processing device calls the corresponding preset processing execution point based on the configuration of the processing execution point in the scheme, and transmits the alarm parameter to the processing execution point, so that in the operation process of the processing execution point, an alarm can be processed according to the alarm characteristics, the automatic processing of the alarm is realized, and the alarm processing execution condition is stored in the alarm library, so that operation and maintenance personnel can check the alarm processing condition at any time.
The present embodiment is not limited to setting the processing execution point, and specifically, the setting is performed according to actual needs.
Optionally, when receiving the alarm processing condition viewing request, the alarm processing device obtains the corresponding alarm processing execution condition from the alarm library and returns the corresponding alarm processing execution condition for displaying in the page. The operation and maintenance personnel can check the alarm processing condition.
Further optionally, in an embodiment of the alarm processing method of the present invention, the alarm processing method further includes one or more of the following operations:
(1) displaying an alarm case maintenance page, and submitting page information to an alarm case library for adding and/or modifying an alarm case;
(2) and displaying an execution point maintenance page, and submitting page information to an alarm case library for adding and/or modifying an execution point, wherein the execution point is an inspection execution point or a processing execution point.
In this embodiment, the operation and maintenance personnel may add or modify an alarm case library, and the alarm processing device provides a corresponding page for maintenance of the operation and maintenance personnel, and may mainly add or modify an alarm template, an alarm necessary keyword, an information collection scheme, or a processing step and an execution point included in an alarm processing scheme.
In addition, the operation and maintenance personnel can also add or modify an execution point, and the alarm processing equipment provides a corresponding page for the operation and maintenance personnel to maintain. An information collection scheme or an alarm handling scheme is composed of a plurality of execution point objects.
The invention also provides a computer readable storage medium.
The computer readable storage medium of the present invention stores an alarm processing program, which when executed by a processor implements the steps in any of the embodiments of the alarm processing method described above.
Through the above description of the embodiments, those skilled in the art will clearly understand that the method of the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but in many cases, the former is a better implementation manner. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (such as ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal (such as a mobile phone, a computer, a server, an air conditioner, or a network device) to execute the method according to the embodiments of the present invention.
The present invention is described in connection with the accompanying drawings, but the present invention is not limited to the above embodiments, which are only illustrative and not restrictive, and those skilled in the art can make various changes without departing from the spirit and scope of the invention as defined by the appended claims, and all changes that come within the meaning and range of equivalency of the specification and drawings that are obvious from the description and the attached claims are intended to be embraced therein.
Claims (9)
1. An alarm processing method, characterized in that the alarm processing method comprises the following steps:
acquiring alarm content in an alarm library;
searching an alarm case library by a search engine by taking the alarm content as a search condition to obtain a first candidate alarm case set meeting a first preset matching degree condition;
screening out a second candidate alarm case set which meets a second preset matching degree condition from the first candidate alarm case set;
extracting a plurality of preset keywords from each candidate alarm case of the second candidate alarm case set in sequence, and matching the keywords with the alarm content to obtain a matching result;
taking the candidate alarm case with the highest matching degree and all matched keywords in the matching result as a finally selected alarm case, wherein the alarm case comprises an alarm template, an information collection scheme and an alarm processing scheme;
extracting alarm parameters from the alarm content based on the alarm template, wherein difference points of the alarm template and the alarm content are compared, and the difference points are abstracted into the alarm parameters;
executing the information collection scheme to obtain alarm related information so that operation and maintenance personnel can manually check the alarm processing scheme based on the alarm related information;
and when the manual review passes, transmitting the alarm parameters into the alarm processing scheme and executing.
2. The alarm handling method of claim 1, wherein prior to obtaining the alarm content in the alarm repository, the alarm handling method further comprises:
and acquiring and analyzing alarm information from an external alarm source to obtain alarm content, and storing the alarm content in an alarm library.
3. The alarm processing method according to any of claims 1-2, wherein the information collection scheme comprises a plurality of processing steps, and each processing step corresponds to an inspection execution point configuration; the executing the information collection scheme to obtain the alarm related information includes:
and calling a corresponding preset check execution point to execute information collection processing based on the check execution point configuration in the information collection scheme to obtain alarm related information, and storing the information collection processing execution condition into an alarm library, wherein the check execution point is an automatic execution script.
4. The alert processing method according to claim 3, wherein the alert processing method further comprises:
after the information collection is completed, sending a message to a preset terminal for informing operation and maintenance personnel to carry out manual examination and verification;
and when the viewing request of the alarm related information is detected, displaying the alarm related information in an auditing page so that operation and maintenance personnel can manually audit the alarm processing scheme based on the alarm related information.
5. The alarm processing method of claim 4, wherein the alarm processing scheme comprises a plurality of processing steps, and each processing step corresponds to a processing execution point configuration; the passing the alarm parameters into the alarm handling scheme and performing comprises:
based on the configuration of the processing execution point in the alarm processing scheme, calling a corresponding preset processing execution point and transmitting the alarm parameter into the processing execution point;
and executing the processing execution point to process the alarm and storing the alarm processing execution condition into an alarm library, wherein the processing execution point is an automatic execution script.
6. The alert processing method according to claim 5, wherein the alert processing method further comprises:
and when an alarm processing condition viewing request is received, acquiring the corresponding information collection processing execution condition and/or the alarm processing execution condition from the alarm library and returning.
7. The alert processing method according to claim 5, wherein the alert processing method further comprises one or more of:
displaying an alarm case maintenance page, and submitting page information to an alarm case library for adding and/or modifying an alarm case;
and displaying an execution point maintenance page, and submitting page information to an alarm case library for adding and/or modifying an execution point, wherein the execution point is an inspection execution point or a processing execution point.
8. An alarm processing device, characterized in that the alarm processing device comprises: memory, a processor and an alarm handling program stored on the memory and executable on the processor, the alarm handling program when executed by the processor implementing the steps of the alarm handling method according to any of claims 1-7.
9. A computer-readable storage medium, characterized in that the computer-readable storage medium has stored thereon an alert processing program which, when executed by a processor, implements the steps of the alert processing method according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710962562.8A CN107908525B (en) | 2017-10-13 | 2017-10-13 | Alarm processing method, equipment and readable storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710962562.8A CN107908525B (en) | 2017-10-13 | 2017-10-13 | Alarm processing method, equipment and readable storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107908525A CN107908525A (en) | 2018-04-13 |
| CN107908525B true CN107908525B (en) | 2021-03-19 |
Family
ID=61841280
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710962562.8A Active CN107908525B (en) | 2017-10-13 | 2017-10-13 | Alarm processing method, equipment and readable storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107908525B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110795414B (en) * | 2019-11-01 | 2023-04-14 | 北京北方华创微电子装备有限公司 | Alarm analysis method and device for semiconductor equipment |
| CN113535933B (en) * | 2021-06-01 | 2023-07-25 | 科大讯飞股份有限公司 | Case retrieval method and device, electronic equipment and storage device |
| CN116185765B (en) * | 2022-12-30 | 2023-09-15 | 上海擎创信息技术有限公司 | Alarm processing method and device, electronic equipment and storage medium |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TW200721005A (en) * | 2005-11-18 | 2007-06-01 | Inventec Corp | Method and system for automatically displaying memory configuration data of computer platform at host end |
| CN101360001B (en) * | 2007-07-31 | 2012-05-23 | 中兴通讯股份有限公司 | Apparatus and method for processing alarm by network manager at upper layer |
| US9483344B2 (en) * | 2012-04-05 | 2016-11-01 | Assurant, Inc. | System, method, apparatus, and computer program product for providing mobile device support services |
| CN103684828B (en) * | 2012-09-18 | 2018-08-03 | 长春亿阳计算机开发有限公司 | A kind for the treatment of method and apparatus of telecommunication equipment fault |
-
2017
- 2017-10-13 CN CN201710962562.8A patent/CN107908525B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN107908525A (en) | 2018-04-13 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR102589649B1 (en) | Machine learning decision-guiding techniques for alerts generated in monitoring systems | |
| EP4099170B1 (en) | Method and apparatus of auditing log, electronic device, and medium | |
| US20100199132A1 (en) | Systems, methods and computer program products for remote error resolution reporting | |
| CN109670091B (en) | Metadata intelligent maintenance method and device based on data standard | |
| CN107908525B (en) | Alarm processing method, equipment and readable storage medium | |
| WO2020237877A1 (en) | Log monitoring method and apparatus, terminal, and storage medium | |
| CN110851324B (en) | Log-based routing inspection processing method and device, electronic equipment and storage medium | |
| US9706005B2 (en) | Providing automatable units for infrastructure support | |
| CN114528457A (en) | Web fingerprint detection method and related equipment | |
| CN110597694A (en) | Method and terminal for monitoring front-end page | |
| CN116069838A (en) | Data processing method, device, computer equipment and storage medium | |
| CN111506455B (en) | Checking method and device for service release result | |
| US20120078912A1 (en) | Method and system for event correlation | |
| CN112181695A (en) | Abnormal application processing method, device, server and storage medium | |
| CN115310011A (en) | Page display method and system and readable storage medium | |
| CN116089446A (en) | Optimization control method and device for structured query statement | |
| CN114996080A (en) | Data processing method, device, equipment and storage medium | |
| CN113781068A (en) | Online problem solving method and device, electronic equipment and storage medium | |
| CN113010339A (en) | Method and device for automatically processing fault in online transaction test | |
| CN113468076A (en) | Application program exception testing method, device, equipment and storage medium | |
| CN113238901A (en) | Multi-device automatic testing method and device, storage medium and computer device | |
| CN111835566A (en) | System fault management method, device and system | |
| CN114371866A (en) | Version reconfiguration test method, device and equipment of service system | |
| CN114860549B (en) | Buried data verification method, buried data verification device, buried data verification equipment and storage medium | |
| CN111309795B (en) | Business abnormality positioning method and device, electronic equipment and medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |